Need help addressing the following real scenario we are facing with the implementation of the 2FA. 

We have a user that was terminated but has expenses that still need to be submitted but not all the required receipts are available.  A delegate or proxy login does not allow for the missing receipt declaration to be performed.  If I reset the password to log in as the user I have to setup 2FA which is not realistic for every terminated user that has missing receipts.  What other options beside manually creating a "fake" receipt are available?  Seems like the 2FA and Missing Receipt Declaration are working against each other in this scenario.